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Reducing the Computation of Linear 
Complexities of Periodic Sequences over 

GF{p m ) 
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Abstract — The linear complexity of a periodic sequence over 
GF(p m ) plays an important role in cryptography and commu- 
nication [12]. In this correspondence, we prove a result which 
reduces the computation of the linear complexity and minimal 
connection polynomial of a period un sequence over GF(p m ) 
to the computation of the linear complexities and minimal 
connection polynomials of u period n sequences. The conditions 
u\p m — 1 and gcd(n,p m — 1) = 1 are required for the result 
to hold. Some applications of this reduction in fast algorithms 
to determine the linear complexities and minimal connection 
polynomials of sequences over GF{p rn ) are presented. 

Index Terms — Berlekamp-Massey algorithm, Games-Chan al- 
gorithm, linear complexity, minimal connection polynomial, cryp- 
tography 



I. Introduction 

For a period N sequence a = ao, ai, ajv-ii a o> ••■ 
over a finite field GF(p m ), its linear complexity c(a) is 
defined to be the length of the shortest linear feedback 
shift register to generate it, i.e. the smallest positive integer 
k such that there exist some ci,...,Cfc in GF(p m ) and 
Oj+fe = Cidj+fc-i + • • • + CkQ-i hold for all i > 0. The 



polynomial m(a) = 1 — (c\x + ■ ■ ■ 
minimal connection polynomial [12]. 



CfcX ) is called the 



The linear complexity of a periodic sequence is considered 
as the measure of its randomness and plays an important 
role in the application of the sequence in cryptography and 
communication. There are many works [1],[2],[4],[6],[8] 
,[9], [10], [11], [14], [15] and [16] on efficient algorithms for 
determining the linear complexities and minimal connection 
polynomials of sequences. Some authors also have interesting 
results about the linear complexities of some special 
sequences (see [3], [7] and [13]). The famous Berlekamp- 
Massey algorithm [11] can be used to compute the linear 
complexity and minimal connection polynomial of a period 
N sequence over GF(p m ) with time complexity 0(N 2 ) 
(that is, at most 0{N 2 ) field operations in GF(p m )). One 
of the main advantages of the Berlekamp-Massey algorithm 
is the input at the step t of the algorithm is the first t 
elements of the sequence. Actually, the Berlekamp-Massey 
algorithm only needs 2c(a) consecutive elements of the 
sequence to determine its linear complexity and minimal 
connection polynomial [12]. An adapted fast version of 
Berlekamp-Massey algorithm due to Blackburn [1] can be 
used with time complexity 0(iV(log N) 2 log log N). 

In [6] Games and Chan gave a fast algorithm which can 
be used to determine the linear complexity and minimal 

H. Chen is with the Department of Computing and Information Technology, 
School of Information Science and Engineering, Fudan University, Shanghai, 
200433, People's Republic of China 



connection polynomial of a period N = 2* binary sequence 
with time complexity O(N). This algorithm was also 
generalized to compute the linear complexity and minimal 
connection polynomial of a period N = p l sequence over 
GF(p m ) with time complexity O(N) (see [5] and [8]). Based 
on the Games-Chan algorithm, some authors developed fast 
algorithms [9], [10] and [14] for computing the k-error linear 
complexities of period N — 2* binary sequences and period 
N = p 1 sequences over GF(p m ). G.Xiao et al. [15] and 
[16] gave fast algorithms to compute the linear complexities 
and minimal connection polynomials of period N = p* or 
N = 2p l sequences over GF(q) , when q is a primitive 
root modulo p 2 . For sequences of period N = 2 t n, where 
2 t \p m — 1 and gcd(n,p rn — 1) = 1, a fast algorithm which 
can be used to determine their linear complexities more 
efficiently was given in our paper [4] . 

It is well known that the linear complexity and 
minimal connection polynomial of a periodic sequence 
over GF(p m ) can be understood from its generating 
function. For a sequence a = ao, oi, ajv-i> a-0, ■ ■■ 
over GF(p m ) of period N, its generating function 
A(x) = ao + a\x + • • • + a,iX l + ■ ■ ■ = T,i>oaiX l = 

a +a 1 x+»-+UN- 1 x Then the linear complexity of the 

sequence a is c(a) = deg(l — x N ) — deg(gcd(ao + a\x + 
■■■ + ajv-ia^ -1 , 1 — xN )) an d the minimal connection 
polynomial is m(a)(x) 
[12]. 



l-z J ' 



gcd(ao+(iia;H hfliv-l^^ 1 , 1 — a; 7V ) 



In this correspondence we prove a result which reduces the 
computation of the linear complexity and minimal connection 
polynomial of a period un sequence over GF(p m ) to the com- 
putation of the linear complexities and minimal connection 
polynomials of u period n sequences. This reduction result 
can be combined with various known algorithms to compute 
the linear complexities of sequences more efficiently. The main 
result of this correspondence can be thought as a generalization 
of the result in our previous paper [4]. 

II. Main Result 

Let m be a positive integer, p be a prime number, u be 
a positive integer such that u divides p m — 1, and n be a 
positive integer such that gcd(n,p m — 1) = 1 . It is clear 
there are u distinct u-th roots of unity xq, where 
.To = 1, in GF{p m ) since u\p rn — 1. From the condition 
gcd(n,p m — 1) = 1, we can find a unique &j e GF(p m ), 
which is the n-th root of x\ for all i — 0, ...,u — 1. The 
following result is the main result of this correspondence. 

Theorem. Suppose p,m,u,n, xq, ...,x u -i, bo, 
are given as above. Let a = ao, a\, a un -i, ao, cti, ■•■ 
be a period un sequence over GF(p m ). Let a J be 
the period 
period ao + a n b" 



a 2n -ibf- 1 
Then c(a) 



n sequence over GF(p m ) with its first 

+ ••• + a(u-l)nb) ,..;Oi0j + 

,(«-l)n+t ,n-l , 

0j , ...,a n _i.0j + 

/ >./'■' ./ ■■ ) u !• 

c(a°) + c(a 1 ) + ••• + c(a u_1 ) and 



+ a (u-l)n+ibj 

Oun-i&r -1 . M J = 0,1,. 
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m(a)(x) - m(a°)(6 1 a;)TO(a 1 )(fe- 1 x)---TO(a u - 1 )(6-l 1 x). 
Proof. Let f(x) = E^ 1 ^. It is clear 1 - a;"" = 

nr=o(*i - * n ) = «i • ■ - - * n ) rer^i - (rt n )- 

Any two distinct polynomials among the u polynomials 

(1 - *"), (1 - (b^xr),..., (1 - K\xY) are 
coprime in GF(p m )[x}. Thus gcd(/(x),l — x un ) = 
gcd(f(x), 1 - x n ) Y\Zl gcd(/(x), 1 - (b^xY). 

It is clear gcd(/(x), 1 — x n ) — gcd(/o(x),l — x n ), 
where / (x) = T,"~ (a, + a rl+i + ••• + a( u _i) n+i )a;\ 
Thus c(a°) = deg( i53( ^ r ^) and m(a°)(a:) = 
gcdt/w-^) - For each 3 satisfying 1 < j < u - 1, 
we set gcd(/(x), 1 — (6J 1 a;)™) = and 
gcd(/(6jt/),l - y") = Then g 3 {x) = hj^x). 

We have hj(y) = gcd(fj(y),l - y n ), where 
j 3 {y) = ^- Q 1 (a^+a nV b]+ l + - '■ ■ + a {u _ l)n+l b { ^ 1)n+l )y\ 
Thus c(a>) = deg(i=g) and m(a>)(y) = Finally 

c(a) = un - [£^deg(gcd(/Or),l - (6,"^)"))] = 
c(a°) + c(a 1 ) + ••• + c(a u " 1 ) and m(a)(a;) = 
m(a )(6 ( 7 1 a;)m(a 1 )(6 ] ; 1 x) • • • mCa"" 1 )^^). The 
conclusion is proved. 

When u — 2*n, the above result was proved in our previous 
paper [4]. 

In the reduction we need the storage of u elements 
b = 1, b\, b u -\ G GF(p m ) in advance. For a period 
N — un sequence over GF(p m ), where u\p m — 1 and 
gcd(n,p m — 1) = 1, we need < " U ~^ >N field operations to 
get the sequence a , (u — 1)N field operations to get the 
elements 

, ,(u-l)n-l , ,(u-l)n-l j (2u-l)(u-l)JV 

bi,...,b\ ,.. .,6 u _i,. ..,6^! , and * ^ 

field operations to get the sequences a 1 , a u_1 . Thus 
the time complexity of the reduction in the main result is 
3(u - 1)N field operations in GF(p' m ). 



III. Applications 

In this section we use the main result and some known 
algorithms to give fast algorithms for computing the linear 
complexities of sequences over GF(p m ). 

A. An easy example 
Let p be an odd prime, m be an arbitrary positive integer and n 
be a positive integer such that n and p m — 1 are coprime. Then 
we have a unique element b in GF(p m ) such that b n = — 1. 
Here we note b 2n = 1. For arbitrary a , ...,a„_i e GF(p m ), 
let a = oo,ai,...,fl n _i,-oo,-ai,...,-a n _i,flo, ... 
be a period 2n sequence over GF(p m ) . Set 
a' = 2a , 2ai&, 2ai& 4 , 2a„_ife" _1 , 2ao, ... , which 
is a period n sequence over GF(p rn ) . From the main 
result, the linear complexity c(a) is the same as the linear 
complexity c(a') and the minimal connection polynomial 
m(&)(x) is just m(&')(bx). Thus the linear complexity and 
minimal connection polynomial of the period 2n sequence a 
can be determined from the period n sequence a'. 



B. Combining with the generalized Games-Chan 
algorithm 

In this subsection it is assumed that p is a prime number, m 
is a positive integer and u is a positive integer such that u 
divides p m — 1. We now give a fast algorithm to compute 
the linear complexity c(a) of a period N — up h sequence 
a over GF(p m ) with time complexity 0(N). Here u is 
understood as a constant not depending on the sequence. We 
need the storage of u elements b a = 1, 6i, b u _i in advance. 

Input: A period N = up h sequence a over GF{p m ). 

Output: The linear complexity c(a). 

Algorithm. 

Perform the reduction of the main result, we get u period 
p h sequences a°,...,a u_1 . 

For the period p h sequences a°,...,a u_1 , perform the 
following generalized Games-Chan algorithm GGC, the 
outputs are the linear complexities c(a°), c(a u_1 ). 

GGC Algorithm. 

1) Initial value: s <- s = (s , V-i) e GF(p m )P h , 
N <- p h , c <- 0. 

2) Repeat the following a)-c) until h = 0. 

a) For a given p^-tuple s, set = 
(s ip h-i , s ip h-i +p h-i_i) for i = 0,...,p — 1, and 
b(") = ^Z^C^^s®, where u = 0,...,p- 1 and 
Cp_ u _ 1 's are the binomial coefficients. 

b) Find the smallest w such that b( ) = b^ = ... = 
b ( P -w-i) = o and b ( P -w) ^ o for a w e {1, ...,p}. Here if 
b(°^ =/= 0, we set w = p. 

c) Do s <- b( p_w ), c<- (w- + c, and goto a). 

3) When h = and s = (s ) ^ 0, then c <- c + 1, 
otherwise c <— c. 

The final output c of GGC is the linear complexity c(s) 
of the period p h sequence s over GF(p m ). 

Finally we get the linear complexity of c(a) = E" = 7 1 c(a 1 ) 
from the main result. 

We refer to [5], [8] and [10] for the generalized Games- 
Chan algorithm. GGC needs at most 2p 2 N' field operations 
in GF(p m ) for determining the linear complexity of a period 
N' = p h sequence over GF(p m ). On the other hand we need 
at most 3(u — 1)N field operations in the reduction for a 
given period N = uN' sequence. Thus the above algorithm 
needs 3(u - l)iV + w(2p 2 f ) - [3(u - 1) + 2p 2 ]N field 
operations in GF(p m ), where N is the period of the input 



3 



sequence. The coefficient 3(u — 1) + 2p 2 is a fixed constant 
not depending on the sequence. For example, the above fast 
algorithm can be used to determine the linear complexities 
of period N = 3 • 7 h sequences over GF{7 m ) and period 
N = 3 • I3 h sequences over GF(13 m ). 

Example. Let a = 123401520113061256331.... be a 
period 21 sequence over GF(7). We want to compute its 
linear complexity and minimal connection polynomial by the 
above algorithm. First we note 6 = 1, 6i = 4 and b 2 = 2 in 
GF(7). Then 

a = 4424645, a 1 = 4366203, a 2 = 2622130. 

c(a) =c(a°)+c(a 1 )+c(a 2 ). 

m(a)(x) = m(a°)(x)m(a 1 )(4x)m(a 2 )(2x). 

In the case of p = 7 we use the generalized Games-Chan 
algorithm and get 

c(a°) =7,m(a°) = (1 - x) 7 , 

c(ai) = 7, m(a 1 ) = (1 — x) 7 , 

c(a 2 ) =7,m(a 2 ) = (1 - x) 7 . 

Finally we have c(a) = 21 and m(a) = (1 — x) 7 (l — 
4x) 7 (l - 2x) 7 . 

Comparing with the Blackburn's algorithm given in [2], 
the reduction to the u period p h sequences is the same as 
that in the Blackburn's algorithm, because in this case the 
u-th root of unity a in [2] is an element of GF(p m ). 

C. Combining with the Berlekamp-Massey algorithm 

We can also apply the reduction of the main result 
to compute the linear complexity of a period N = un 
(gcd(n,p m — 1) = 1) sequence a over GF(p m ), where u 
divides p m — 1 and n is not a power of p. In this case, we apply 
the Berlekamp-Massey algorithm [11] with time complexity 
0(n 2 ) (or the Blackburn's version [1] of Berlekamp-Massey 
algorithm with time complexity 0(n(\ogn) 2 log log n) ) to 
the u period n sequences after the reduction. It is obvious that 
this would be more efficient than applying the Berlekamp- 
Massey algorithm directly to the original sequence. However 
when this reduction is used, we have to know the whole 
period of the sequence. 

D. Combining with the Xiao-Wei-Lam-Imamura 
algorithm 

Let p and q be two prime numbers. Suppose q is a 
primitive root modulo p 2 , that is, q is the generator of the 
multiplicative group of residue classes (modulo p 2 ) which are 
coprime to p, then a fast algorithm for determining the linear 
complexity of a period N = p n sequence over GF(q m ) with 



time complexity 0(N) was given in [16]. Combining with 
the reduction in our main result, we can determine the linear 
complexity of a period N = up 11 sequence over GF(q m ) 
with time complexity O(N), if u divides q m — 1 , q is a 
primitive root modulo p 2 , p and q m — 1 are coprime. For 
example, it is easy to check that 13 is a primitive root modulo 
25, thus we can determine the linear complexities of period 
N = 3 • 5™ sequences over &F(13 m )(if m ^ 0, mod 4) with 
time complexity 0(N). 

IV. Conclusion 

We have proved a result reducing the computation of the linear 
complexity of a period un sequence over GF(p m ), where u 
divides p' m — 1 and gcd(n,p m — 1) = 1, to the computation 
of the linear complexities of u period n sequences . Based on 
this reduction and some known algorithms we can compute 
the linear complexities of period un sequences over GF(p m ) 
more efficiently. It seems that the main result might be useful 
for other problems about the linear complexities of sequences 
over GF(p m ). 
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